Date: Sun, 27 Jun 1999 20:28:53 +0200 From: Sheldon Hearn <sheldonh@uunet.co.za> To: current@freebsd.org Subject: HEADS UP! Inetd wrapping OFF by default Message-ID: <32068.930508133@axl.noc.iafrica.com>
next in thread | raw e-mail | index | archive | help
Hi folks, I've just committed a change to inetd that will effectively turn TCP Wrapping off for anyone who has an installed /etc/rc.conf that specifies an inetd_flags value, as well as anyone who makes world without running mergemaster to update /etc/defaults/rc.conf . This will not be a problem for most people. Inetd now takes command-line options to enable wrapping. This was a decision taken with the approval of our release engineer in an attempt to revert a backward-compatibility problem introduced in 3.2-RELEASE. The relevant changes to the manpage follow: " SYNOPSIS inetd [-d] [-l] [-w] [-c maximum] [-C rate] [-a address] [-p filename] [-R rate] [configuration file] [...] DESCRIPTION [...] -w Turn on TCP Wrapping. If this option is specified twice, internal services will also be wrapped. See the IMPLEMENTATION NOTES section for more information on TCP Wrappers support. [...] IMPLEMENTATION NOTES When given the -w option, inetd will wrap all services specified as ``stream tcp nowait'' except for ``internal'' services. If the -w option is given twice, such ``internal'' services will be wrapped as well. When wrapping is enabled, the tcpd daemon is not required, as that functionality is builtin. For more information on TCP Wrappers; see the relevant documentation ( hosts_access(5) ). " When this change is merged to STABLE, the release notes will be updated and a fat HEADS UP will be posted to the freebsd-stable mailing list. Ciao, Sheldon. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?32068.930508133>